# Use :nonroot base image for all containers
defaultBaseImage: gcr.io/distroless/static:nonroot